Trust induction booklet - University Hospital Southampton NHS ...

Disclosure of Personal DataUnauthorised disclosure of personal data constitutes a serious breach of discipline and could lead todismissal. Staff should ensure personal information is only disclosed for legitimate purposes and to thoseauthorised to receive it. Particular care should be exercised when disclosing personal data on the telephoneor considering the release of personal data to a third party outside the NHS.Keeping Personal Data SecurePersonal data should be kept secure at all times. All staff have duty to ensure any personal information theyhold on paper or digital form is protected from loss or accidental disclosure at all times.When transferring personal data by any means Trust guidelines on secure communications should befollowed. The use of NHS mail as a means of securely sending personal data within the NHS isrecommended.Subject Access to Personal DataIndividuals have a right under the Data Protection Act 1998 to view or obtain copies of information held aboutthem by organisations. Patients inquiring about their right of ‘subject access’ should be advised to contact theHealth Record Information Team, Patient Advice and Liaison Service (PALS) or consult the Trust publicwebsite for information and advice. Trust staff should apply to the Human Resources department in respect ofpersonal information held by the Trust about them.Health Records Information Team: 02380 748005 or 02380 794885Trust PALS: 02380 798498Trust Public Website:www.uhs.nhs.ukBreaches of ConfidentialityIf you think that a breach of confidentiality has taken place please report it as a non-clinical incident using theTrust incident management reporting mechanism.CaldicottThe Trust is required to have a Caldicott Guardian to safeguard and govern the uses made of confidentialpatient information.The Trust Caldicott Guardian is:Director of Nursing and Patient ServicesRemember• You have a legal duty to keep any personal data you handle secure at all times and to ensure it is notreleased without appropriate consent• The use of personal data for purposes other than direct care may need specific consent from the patient• Health Records belong to the Secretary of State and the Trust. It is a disciplinary offence to access yourown, family or others records• There are monitoring facilities in place that can identify individuals who access information on the Trustsystems inappropriately• To follow the guidance contained in the Trust Confidentiality and Data Protection Policy and keep up todate by completing the training offered as part of the Trust Mandatory Training programme.If you have any queries on confidentiality or Data Protection issues please contact:The Data Protection Office: Extn 5079From 3 rd September 12 Page 22 of 31